EIP-2026-100349

The provided text describes a cross-site scripting (XSS) vulnerability in Hosting Controller versions 6.1 and prior. The vulnerability arises from insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.